What does “Activate SSL” in the plugin actually do?

To fully enable HTTPS/SSL on your WordPress site, you only have to click Activate SSL in this plugin, and in most cases your website will immediately work over SSL. So, what actually happened in the background?

When clicking Activate SSL in the Really Simple Security (formerly Really Simple SSL) dashboard, the plugin:

  • Checks for SSL before activating
  • Selects the appropriate .htaccess redirect rule based on your server configuration
  • If necessary, it adds a load balancer fix to wp-config.php. If the WordPress function is_SSL() fails, an edit has to be made in the wp-config.php to inform WordPress that your website is on SSL.
  • If necessary,  itadds a server variable fix to wp-config.php. If your server is configured not to pass any server variable to WordPress that we are on SSL, while the plugin did detect SSL: an edit will be made to the wp-config.php to properly inform WordPress your site is on SSL.
  • Changes your siteurl and homeurl to https://, and if applicable, also updates any hardcoded define statements in the wp-config.php.
  • Checks for insecure content on the frontend (http:// content on a https:// site), and replaces those resources to https://.

 

Simple and Performant Security.
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate generation.